Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50025E64B95811F09F1F8DD5DAE4EC9C.roa
File: 50025E64B95811F09F1F8DD5DAE4EC9C.roa (raw, json)
Hash identifier: 9lpG7DpSBUQ9MUegGRiZpnx+YlaPnGliQKb91xK8UJM=
Subject key identifier: 8C:C3:76:3F:DA:A0:8B:DE:A6:8B:69:95:29:C0:30:6A:79:8D:4E:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A76D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50025E64B95811F09F1F8DD5DAE4EC9C.roa
Signing time: Tue 04 Nov 2025 08:29:00 +0000
ROA not before: Tue 04 Nov 2025 08:28:53 +0000
ROA not after: Sun 07 Dec 2025 08:28:53 +0000
asID: 147176
IP address blocks: 154.197.116.0/24 maxlen: 24
154.197.124.0/24 maxlen: 24
154.215.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108397 (0x1a76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 08:28:53 2025 GMT
Not After : Dec 7 08:28:53 2025 GMT
Subject: CN=6909b94c-3780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:58:38:27:b6:ba:17:92:46:30:94:3f:2b:
49:24:21:15:22:51:82:1a:c7:a9:3b:65:5c:0f:fe:
94:f5:4d:a6:55:7f:a5:a3:74:42:04:50:a4:e8:e6:
6e:2f:8a:d3:4e:7c:ed:ee:3a:8a:27:37:17:2c:25:
f6:1b:2b:85:d5:6b:9e:20:b8:a1:92:2b:48:f7:b2:
7c:f5:66:93:c6:da:9b:bb:37:bf:f8:ee:b6:f2:f3:
4e:8c:e7:ce:46:3a:78:94:fd:c1:00:ab:67:f4:c9:
31:ad:b5:32:33:e3:bf:58:93:f8:8a:42:c0:7a:c1:
30:83:81:0e:74:cf:12:94:e2:11:77:2e:83:82:3d:
30:96:38:6f:47:41:9e:43:57:23:ca:b9:ae:be:75:
c9:40:83:15:e9:bc:cd:aa:10:24:5e:56:44:a7:5b:
5b:0d:85:c7:35:fc:ce:d9:5c:6f:24:68:16:fd:38:
75:7c:6a:a5:a6:f2:15:98:de:1f:f0:75:83:10:6d:
5f:7e:88:97:54:c2:99:2c:ec:6f:06:7f:19:84:3a:
20:07:c5:6f:bb:8e:7c:10:31:96:0c:ab:32:a4:ff:
93:a5:28:75:0d:57:6d:ee:6b:c4:27:02:da:f2:43:
1e:f7:0a:bd:0d:05:2d:96:ae:fb:22:e2:7d:3a:e6:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C3:76:3F:DA:A0:8B:DE:A6:8B:69:95:29:C0:30:6A:79:8D:4E:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50025E64B95811F09F1F8DD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.116.0/24
154.197.124.0/24
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d1:c8:f1:2b:01:3b:36:7a:9d:0f:5f:4b:87:fc:1f:3e:09:
ac:2f:3d:9a:d6:54:c5:03:d5:c6:c4:fa:8b:95:4e:f2:5e:eb:
ee:23:9f:c2:14:e6:61:dd:0b:a2:37:c5:82:41:2c:9f:98:06:
62:44:7c:7b:e3:4c:88:3c:01:f2:88:09:97:2f:38:50:63:ac:
8f:8b:60:62:85:83:c5:f1:53:3b:2f:0d:ae:d8:ad:d8:a1:1c:
95:ce:b3:49:24:e6:5b:4d:61:1d:b6:2b:70:18:7b:de:6c:9e:
3e:bc:69:b6:1f:ef:59:6d:c1:a0:a5:0a:33:79:90:06:b2:13:
37:1e:f3:c0:43:02:7f:c3:f7:96:54:ce:8e:58:73:8e:21:b3:
8a:fe:47:df:ef:24:ca:2d:c9:52:c1:a9:25:09:27:f1:5c:e8:
c6:ff:3d:56:f6:81:25:38:dc:cc:17:4e:c1:f3:a7:87:89:92:
8c:30:ed:b6:f0:b4:e2:94:c1:22:5d:e0:1a:61:a4:c0:71:ad:
36:ac:29:11:45:37:e7:0b:92:5b:83:c8:f0:dd:77:06:fb:19:
5e:54:79:c5:76:ab:18:0f:50:b0:49:01:5b:b6:27:24:f2:f2:
52:6d:57:69:12:ac:46:d5:ce:a1:dd:6c:38:28:fe:e2:21:bf:
ba:94:8c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:46:23 2025 by rpki-client